Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier: Hc7gB1HKHX5mac4oEScyIN4/7pWBTtmMZZ1Iz6gpfKo=
Subject key identifier: 8D:9F:A0:07:44:94:55:65:BF:2C:7D:56:0A:F6:D8:DC:AB:55:BA:E2
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 019FAD891E33D68CD440E55F39017344B4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number: 08B3
Signing time: Wed 29 Jul 2026 11:01:12 +0000
Manifest this update: Wed 29 Jul 2026 11:01:12 +0000
Manifest next update: Thu 30 Jul 2026 11:01:12 +0000
Files and hashes: 1: TYmQbCMoT4fS2qLD8XTST39V7ao.roa (hash: AGtO8iqNaCFj7ECH8S64l5TD2JUqi3IXF+NQdgnWnfk=)
2: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: adPy/UEajBOGegMeCVyjSk2vN2S2M+sr1Z4zoxiyLp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:89:1e:33:d6:8c:d4:40:e5:5f:39:01:73:44:b4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: Jul 29 11:01:12 2026 GMT
Not After : Jul 30 11:01:12 2026 GMT
Subject: CN=8d9fa00744945565bf2c7d560af6d8dcab55bae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:06:55:87:27:2e:4d:2c:aa:b6:0e:bf:61:
95:f9:aa:2f:74:5f:c5:91:9a:77:24:13:49:19:01:
10:19:24:6b:c0:d0:aa:e4:ce:af:02:9a:47:94:bd:
c7:7c:4d:76:24:02:b8:bb:32:7c:9d:51:11:d9:06:
54:95:2e:9e:ce:82:39:5c:58:7a:f4:87:bf:66:1d:
c5:f9:72:f4:4c:64:1d:42:43:89:72:a8:3d:9a:7e:
79:cb:e4:b2:8e:7b:9c:c6:e0:dc:02:89:84:3b:20:
93:3b:ab:0a:77:5a:0e:8f:fc:20:81:15:fa:14:b8:
8d:6c:31:54:c8:11:98:89:4f:ba:9f:8e:63:80:c2:
0d:ce:cd:2c:e8:cf:c3:57:ac:90:85:f4:5b:c7:2d:
53:75:57:41:3b:16:d8:fd:5b:04:8e:c4:62:e4:40:
ae:83:75:0d:cf:05:dc:69:87:5e:b6:62:d3:28:ef:
35:64:91:30:32:09:a9:c0:4b:30:b4:0b:f1:dc:b7:
6e:39:6b:e3:b3:6d:a5:62:10:bd:a0:85:f3:5d:95:
e4:6b:49:6b:0a:31:9e:7e:ef:2a:9d:3e:98:34:34:
8a:a0:8b:3b:6e:07:9f:9d:2d:14:50:72:21:b3:eb:
95:e0:23:e3:47:cd:29:f6:de:79:01:05:09:d1:35:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9F:A0:07:44:94:55:65:BF:2C:7D:56:0A:F6:D8:DC:AB:55:BA:E2
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c2:dc:bc:e5:b9:43:e9:89:d7:fc:69:f6:19:80:c3:67:59:
01:be:19:94:c3:e0:e0:bc:c8:83:83:30:f1:ad:ec:b1:2d:3e:
ad:12:77:32:64:b2:e2:c8:67:13:8f:aa:75:33:f2:84:92:00:
3e:11:01:fc:a7:c0:a9:a6:24:51:be:aa:3d:ab:c3:93:f4:f2:
7c:c1:c9:0e:92:1a:3b:01:c4:06:c6:08:b1:2b:b1:d5:ea:7c:
26:0a:66:69:f1:5e:8e:92:44:e8:48:28:72:ee:07:e2:1e:f4:
c9:01:72:31:45:4c:30:f5:0a:32:f6:1d:85:14:be:1a:f1:63:
17:3f:76:5c:c1:6d:e8:6e:f2:57:b1:6e:44:ee:20:f5:92:f1:
b2:c5:ab:3f:89:89:7d:fb:de:14:12:03:f8:7c:1e:04:c0:07:
c8:42:5c:94:36:53:99:03:3c:4c:ea:af:d2:bd:87:b7:0a:15:
e2:93:47:d3:e9:bd:33:ad:3a:4c:3f:c5:7b:4e:c1:ad:27:2c:
74:45:5f:7d:d1:07:f0:17:7e:7d:4e:a2:88:90:e7:d5:d8:ea:
32:49:e9:31:96:31:84:e5:29:f4:33:ad:99:a5:6d:07:68:ef:
5d:53:e4:ce:24:40:18:3a:fc:b6:30:df:df:f9:48:be:65:98:
7c:45:a7:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tiR4z1ozUQOVfOQFzRLTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmM2E2YzIxOTQxYzFlMTNiZmZjNGQ0NGQ2MWJkMjU5NWZk
ZDhmZTgwHhcNMjYwNzI5MTEwMTEyWhcNMjYwNzMwMTEwMTEyWjAzMTEwLwYDVQQD
Eyg4ZDlmYTAwNzQ0OTQ1NTY1YmYyYzdkNTYwYWY2ZDhkY2FiNTViYWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcoGVYcnLk0sqrYOv2GV+aovdF/F
kZp3JBNJGQEQGSRrwNCq5M6vAppHlL3HfE12JAK4uzJ8nVER2QZUlS6ezoI5XFh6
9Ie/Zh3F+XL0TGQdQkOJcqg9mn55y+SyjnucxuDcAomEOyCTO6sKd1oOj/wggRX6
FLiNbDFUyBGYiU+6n45jgMINzs0s6M/DV6yQhfRbxy1TdVdBOxbY/VsEjsRi5ECu
g3UNzwXcaYdetmLTKO81ZJEwMgmpwEswtAvx3LduOWvjs22lYhC9oIXzXZXka0lr
CjGefu8qnT6YNDSKoIs7bgefnS0UUHIhs+uV4CPjR80p9t55AQUJ0TUU+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2foAdElFVlvyx9Vgr22NyrVbriMB8GA1UdIwQY
MBaAFF86bCGUHB4Tv/xNRNYb0llf3Y/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMt
Y2Y4Njk4NzU3ZDM3LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMtY2Y4Njk4NzU3ZDM3
LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8LcvOW5
Q+mJ1/xp9hmAw2dZAb4ZlMPg4LzIg4Mw8a3ssS0+rRJ3MmSy4shnE4+qdTPyhJIA
PhEB/KfAqaYkUb6qPavDk/TyfMHJDpIaOwHEBsYIsSux1ep8JgpmafFejpJE6Ego
cu4H4h70yQFyMUVMMPUKMvYdhRS+GvFjFz92XMFt6G7yV7FuRO4g9ZLxssWrP4mJ
ffveFBID+HweBMAHyEJclDZTmQM8TOqv0r2HtwoV4pNH0+m9M606TD/Fe07BrScs
dEVffdEH8Bd+fU6iiJDn1djqMknpMZYxhOUp9DOtmaVtB2jvXVPkziRAGDr8tjDf
3/lIvmWYfEWnbw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:57:31 2026 by rpki-client